Blockchain payments are legal for businesses in the US, EU, UK, Brazil, and Mexico, under different rules. What each country regulates, as of October 2026.
Yes. Blockchain payments are legal for businesses in the US, the EU, the UK, Brazil, and Mexico. None of these countries stops a company from paying or getting paid through stablecoins. What they regulate is the middle: stablecoin issuers, exchanges, and the providers that convert and move the money. Those firms need licenses and run KYC, AML, and sanctions checks on everyone they serve.
So the practical question isn't "is it legal," it's "is my provider licensed where my money moves, and what do I still own?" This page answers it country by country. If you're new to how these payments work, start with what blockchain payments are.
This article summarizes the rules as of October 2, 2026. It is general information, not legal advice. Rules change; confirm your own obligations with counsel.
| United States | European Union | United Kingdom | Brazil | Mexico | |
|---|---|---|---|---|---|
| Main framework | GENIUS Act (2025), plus FinCEN and state money transmission rules | MiCA, Regulation (EU) 2023/1114 | FSMA cryptoasset regime; AML registration with the FCA today | Law 14.478/2022 and BCB Resolutions 519, 520, 521 | Fintech Law (2018), Banxico Circular 4/2019, anti-money laundering law (LFPIORPI) |
| Stablecoin issuer rules | Core rules take effect January 18, 2027 | In force since June 30, 2024 | Final rules June 2026; regime starts October 25, 2027 | Covered by the virtual asset regime | No stablecoin-specific law |
| Who needs a license | Issuers; money transmitters register with FinCEN and hold state licenses | Issuers (as EMIs or banks) and crypto-asset service providers | Cryptoasset businesses register with the FCA now; authorization under the new regime | Virtual asset service providers (PSAV) | Banks and fintech institutions need Banxico approval, limited to internal operations |
| Travel rule | USD 3,000 | Every transfer | Every transfer, reduced data below EUR 1,000 | Resolution 520, phased in through February 2, 2028 | No crypto travel rule; exchange activity is reportable to the UIF |
| What a business using a provider does | Gives accurate KYB data, follows OFAC sanctions | Uses an authorized CASP, uses MiCA-compliant stablecoins | Uses an FCA-registered firm | Uses an authorized provider; cross-border flows follow FX rules | Pays and gets paid in pesos through a provider, usually over SPEI |
The rest of the page explains each column.
Yes. The GENIUS Act, signed on July 18, 2025, is the federal law for payment stablecoins. It requires issuers to be licensed, to hold 1:1 reserves in cash and short-term Treasuries, and to publish monthly reserve reports, and it bans them from paying holders interest. Its core rules take effect on January 18, 2027, and from July 18, 2028, platforms may only offer stablecoins from permitted issuers to people in the US.
A business that pays and gets paid through a provider doesn't need a GENIUS license. Two other layers still apply. Companies that move money for others are money transmitters: they register with FinCEN as a money services business and hold state licenses. And every US person follows OFAC sanctions. The GENIUS Act explained for businesses covers the rule-making timeline in detail.
Yes. MiCA, the Markets in Crypto-Assets regulation, has applied to stablecoins since June 30, 2024 and to crypto-asset service providers since December 30, 2024. A euro or dollar stablecoin is an e-money token, which only a licensed credit institution or electronic money institution can issue. Exchanges, custodians, and transfer providers need authorization as crypto-asset service providers.
The Transfer of Funds Regulation applies the travel rule to every crypto transfer between providers, with no minimum, since December 30, 2024. For a business, the practical effects are two: use an authorized provider, and expect it to offer only MiCA-compliant stablecoins. MiCA stablecoin rules explained goes deeper.
Yes. Today, firms that exchange or hold cryptoassets for customers in the UK must register with the Financial Conduct Authority under the money laundering regulations, and they apply the travel rule to all transfers.
A full regime is on the way. On June 30, 2026, the FCA published its final rules for the new cryptoasset regime, including policy statement PS26/10 on issuing UK stablecoins: backing assets, redemption, safeguarding, and disclosures. The application window opened on September 30, 2026 and closes on February 28, 2027, and the regime starts on October 25, 2027. The government has also proposed moving payments that use UK-issued stablecoins into a future payments regime rather than treating them as crypto trading. For businesses using a provider, the rule of thumb holds: work with an FCA-registered firm now, and ask it about its authorization plan.
Yes. Law 14.478/2022 set the legal framework for virtual asset service providers, and the Banco Central do Brasil published Resolutions 519, 520, and 521 on November 10, 2025. They took effect on February 2, 2026 and require providers serving Brazilians to be authorized as PSAVs, wherever they're based.
The detail that matters for cross-border payments: Resolution 521 brings international payments and transfers with virtual assets, and the purchase or sale of stablecoins referenced in a foreign currency, inside Brazil's foreign exchange rules. A dollar stablecoin payment into Brazil is treated like an FX operation, with the reporting that comes with it. Resolution 520 also brings in the travel rule, phased in until full compliance on February 2, 2028. Pix payouts require the receiver's name and CPF or CNPJ to match the account. PSAV in Brazil explained covers who needs authorization.
Yes, for businesses, with one big limit on banks. Mexico's Fintech Law of March 2018 defines virtual assets and leaves their regulation to the Banco de México. Banxico's Circular 4/2019, published on March 8, 2019, lets banks and fintech institutions use virtual assets only in internal operations, with prior approval, and not offer them to customers.
Outside the banking system, exchanging virtual assets as a business is a "vulnerable activity" under the federal anti-money laundering law (LFPIORPI). Firms that do it identify their customers and report operations above set thresholds to the financial intelligence unit. A July 2025 reform lowered those thresholds and extended record-keeping to 10 years. Mexico has no stablecoin-specific law. In practice, Mexican suppliers and contractors get paid in pesos over SPEI, and the stablecoin conversion happens at a provider.
In every country above, the provider carries most of the regulated work. Your side is short, and it doesn't go away.
BlindPay is registered with FinCEN as a Money Services Business (NMLS #2745309) and publishes its license status by country on its licenses page. KYC, KYB, sanctions screening, and travel rule checks run inside the API before money moves, so a business using BlindPay doesn't build them from scratch.
Payouts land in local currency over Pix in Brazil, SPEI in Mexico, ACH, wire, and RTP in the US, SEPA in Europe, and SWIFT (POBO/COBO) elsewhere. The customer requirements per country are in the KYC reference, and the countries BlindPay serves, by risk tier, are in the supported countries list.
List the countries your money leaves from and lands in. For each one, ask your provider two questions: which license or registration covers it there, and who runs the travel rule. Then check your own product against step 2 above. For the bigger picture of how the rules compare, see the stablecoin regulation tracker, and for who carries compliance in each payment model, direct vs indirect stablecoin exchange.
This article is for general information only and is not legal advice.
The evidence examiners expect from automated risk monitoring: a 10-item evidence table, good vs poor practice, SAR timelines, RFIs, and a 30-day plan.
Stablecoin transfers settle final in minutes and cannot be reversed. That finality proves custody at every step, but it also opens a fraud gap on the fiat side of the payment.
A side-by-side comparison of automated and manual KYC/KYB for fintechs: onboarding time, false-positive rates, cost per verification, scaling across jurisdictions, and audit-trail quality, plus the cases where a human reviewer is still required.